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201 1 South Clark Place Room 
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ETATS-UNIS D'AMERIQUE 
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International application No.: 

PCT/JP00/05802 


Applicant's or agent's file reference: 
12577 


International filing date: 

28 August 2000 (28.08.00) 


Priority date: 

27 August 1999 (27.08.99) 


Applicant: 

SHINDO,Jiro 


1. The designated Office is hereby notified of its election made: j 


| X| in the demand filed with the International preliminary Examining Authority on: 


18 January 2001 (18.01.01) 


| ^ in a notice effecting later election filed with the International Bureau on: 


2. The election | X| was 




j | was not 




made before the expiration of 1 9 months from the priority date or, where Rule 32 applies, within the time limit under 
Rule 32.2(b). 


The International Bureau of WIPO 
34, chemin des Colombettes 
121 1 Geneva 20, Switzerland 

Facsimile No.: (41-22) 740.14.35 


Authorized officer: 

J. Zahra 

Telephone No.: (41-22)338.83.38 
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From the INTERNATIONAL BUREAU 



PCT 



NOTIFICATION OF THE RECORDING 
OF A CHANGE 

(PCT Rule92bis.1 and 
Administrative Instructions, Section 422) 



Date of mailing (day/month/year) 
11 March 2002(11.03.02) 

Applicant's or agent* s file reference 
12577 



To: 



UMEDA, Akihiko 
No.3 Seiko Building 7F 
6-10, Akasaka 3-chome 
Minato-ku, Tokyo 107-0052 
JAPON 



IMPORTANT NOTIFICATION 



International application No. 
PCT/JPOO/05802 



International filing date (day/month/year) 

28 August 2000 (28.08.00) 



1 The following indications appeared on record concerning: — 

1. The following mac ^ . — the common representative 

[X] the applicant Q the inventor [_| the agent |_| 

Name and Address 

DIGITAL PUBLISHING JAPAN CO. LTD. 
186-1, Kamigamo-Motoyama, Kita-ku 
Kyoto-shi, Kyoto 603-8047 
Japan 



State of Nationality 
JP 



State of Residence 
JP 



Telephone No. 



Facsimile No. 



Teleprinter No. 



| | the person 



Name and Address 

Celartem Technology Inc. 
196-1, Kamigamo-Motoyama, Kita-ku 
Kyoto-shi, Kyoto 603-8047 
Japan 



State of Nationality 
JP 



State of Residence 
JP 



Telephone No. 



Facsimile No. 



Teleprinter No. 



3. Further observations, if necessary: 

4. A copy of this notification has been sent to: 
pX] the receiving Office 

| | the International Searching Authority 

|~| the International Preliminary Examining Authority 



The International Bureau of WIPO 
34, chemin des Colombettes 
1211 Geneva 20, Switzerland 

Facsimile No.: (41-22) 740.14.35 



| | the designated Offices concerned 
|~Xj the elected Offices concerned 
I | other: 

Authorized officer 

Akiko KOYAMA 
Telephone No.: (41-22) 338.83.38 
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OF A CHANGE 

(PCT Rule 92bis.1 and 
Administrative Instructions, Section 422) 


To: 

UMEDA, Akihiko 
No.3 Seiko Building 7F 
6-10, Akasaka 3-chome 
Minato-ku, Tokyo 107-0052 
JAPON 


Date of mailing (day/month/year) 
11 March 2002(11.03.02) 


Applicant's or agent/ s file reference 
12577 


IMPORTANT NOTIFICATION 


International application No. 
PCT/JP00/05802 


International filing date (day/month/year) 
28 August 2000 (28.08.00) 


1. The following indications appeared on record concerning: 

X the applicant Q<] the inventor Q the agent Q the commo 


i representative 


Name and Address 
SHINDO, Jiro 

Digital Publishing Japan Co. Ltd. 
196-1, Kamigamo-Motoyama, Kita-ku 
Kyoto-shi, Kyoto 603-8047 

Japan I 


State of Nationality 

JP | 


State of Residence 
JP 


Telephone No. 


Facsimile No. 


Teleprinter No. 


2. The International Bureau hereby notifies the applicant that the following change has been recorded concerning: 
[ | the person the name [x] the address Q the nationality Q the residence 


Name and Address 

SHINDO, Jiro 

Celartem Technology Inc. 

196-1, Kamigamo-Motoyama 

Kita-ku 

Kyoto-shi 

Kyoto 603-8047 

Japan 


State of Nationality 
JP 


State of Residence 
JP 


Telephone No. 


Facsimile No. 


Teleprinter No. 


3. Further observations, if necessary: 




4. A copy of this notification has been sent to: 
|~X| the receiving Office I ] the designated Offices concerned 
F ] the International Searching Authority [x] the elected Offices concerned 
f - 1 the International Preliminary Examining Authority Q other: 


The International Bureau of WIPO 
34, chemin des Cotombettes 
1211 Geneva 20, Switzerland 

Facsimile No.: (41-22) 740.14.35 


Authorized officer 

Akiko KOYAMA 

Telephone No.: (41-22) 338.83.38 
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(PCT Article 36 and Rule 70) - 



Applicant's or agent's file reference 
12577 


SeeNotificationofTransmittaloflnternational Preliminary 
FOR FURTHER ACTION Examination Re port (Form PCT/IPEA/4 1 6) 


International application No. 

PCT/JP00/05802 


International filing date (day/month/year) 
28 August 2000 (28.08.00) 


Priority date {day' month year) 

27 August 1999 (27.08.99) 


International Patent Classification (IPC) or national classification and IPC 
H04N 1/387, G06F 12/14, 15/00, G06T 1/00 


Applicant 

DIGITAL PUBLISHING JAPAN CO. LTD. 



1. This international preliminary examination report has been prepared by this International Preliminary Examining Authority 
and is transmitted to the applicant according to Article 36. 



This REPORT consists of a total of 



sheets, including this cover sheet. 



This report is also accompanied by ANNEXES, i.e.. sheets of the description, claims and/or drawings which have 
been amended and are the basis for this report and/or sheets containing rectifications made before this Authority (see 
Rule 70. 16 and Section 607 of the Administrative Instructions under the PCT). 



These annexes consist of a total of _ 



sheets. 



3. This report contains indications relating to the following items: 
Basis of the report 
Priority 

Non-establishment of opinion with regard to novelty, inventive step and industrial applicability 
Lack of unity of invention 

Reasoned statement under Article 35(2) with regard to novelty, inventive step or industrial applicability; 
citations and explanations supporting such statement 

Certain documents cited 

Certain defects in the international application 

Certain observations on the international application 



I 




II 


□ 


III 


□ 


IV 


□ 


V 




VI 


□ 


VII 


n 


VIII 


□ 



Date of submission of the demand 

18 January 2001 (18.01.01) 


Date of completion of this report 

16 October 2001 (16.10.2001) 


Name and mailing address of the IPEA/JP 
Facsimile No. 


Authorized officer 
Telephone No. 



Form PCT/IPEA/409 (cover sheet) (July 1998) 



international application No. 
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I. Basis of the report 



1. With regard to the elements of the international application:* 
| the international application as originally filed 

the description: 

pages MO , as originally filed 

pages - filecl wiln the demand 

pages . filed with the letter of 

the claims: 

pages 1-5.9, 17,24 . as originally filed 

pages . as amended (together with any statement under Article 19 

pages ; fi^d with the demand 

pages 25-49 . filed with the letter of 28 September 2001 (28.09.2001 ) 

^ the drawings: 



pages 1,2 , as originally filed 

pages , filed with the demand 

pages , filed with the letter of 

| | the sequence listing part of the description: 

pages - 35 originally filed 

pages , filed with the demand 

pages , filed with the letter of 



2. With regard to the language, all the elements marked above were available or furnished to this Authority in the language in which 
the international application was filed, unless otherwise indicated under this item. 

These elements were available or furnished to this Authority in the following language which is: 

1 1 the language of a translation furnished for the purposes of international search (under Rule 23.1(b)). 
[ j the language of publication of the international application (under Rule 48.3(b)). 

j H the language of the translation furnished for the purposes of international preliminary examination (under Rule 55.2 and/ 
~ or 55.3). 

3. With regard to any nucleotide and/or amino acid sequence disclosed in the international application, the international 
preliminary examination was carried out on the basis of the sequence listing: 

I 1 contained in the international application in written form. 

filed together with the international application in computer readable form. 
I 1 furnished subsequently to this Authority in written form. 
I | furnished subsequently to this Authority in computer readable form. 

| ] The statement that the subsequently furnished written sequence listing does not go beyond the disclosure in the 

international application as filed has been furnished. 
{ j The statement that the information recorded in computer readable form is identical to the written sequence listing has 

been furnished. 

The amendments have resulted in the cancellation of: 
f I the description, pages 



the claims, Nos. 6-8J0-I6. 18-23 
1 I the drawings, sheets/fig 



| I This report has been established as if (some of) the amendments had not been made, since they have been considered to go 
' ' — ' beyond the disclosure as filed, as indicated in the Supplemental Box (Rule 70:2(c)).** 

* Replacement sheets which have been furnished to the receiving Office in response to an invitation under Article 14 are referred to 
in this report as "originally filed" and are not annexed to this report since they do not contain amendments (Rule 70.16 
and 70. 17). 

** Any replacement sheet containing such amendments must be referred to under item I and annexed to this report. 



Form PCT/IPEA/409 (Box I) (July 1998) 



mernational application No. 

INTERNATIONAL PRELIMINARY EXAMINATION REPORT | PCT/JP00/05802 



V. Reasoned statement under Article 35(2) with regard to novelty, inventive step or industrial applicability; 
citations and explanations supporting such statement 



1 . Statement 

Novelty (N) Claims 4-5.9,1 7.24-29 YES 

Claims 1-3 NO 

Inventive step (IS) Claims 17,41-49 . YES 

Claims 1-5,9,24-40 NO 

Industrial applicability (IA) Claims 1-5,9,17,24-49 YES 

Claims NO 



2. Citations and explanations 

Claims 1-3,5,9, 25-38 and 40 

Document 1: JP, 1 1-66010, A (Canon Inc.), 9 March, 1999 (09.03.99), full text, Figs. 1-12 
Document 2: JP, 1 1-212461, A (Canon Inc.), 6 August, 1999 (06.08.99), full text, Figs. 1-17 
Document 3: JP, 1 1-69137, A (Canon Inc.), 9 March, 1999 (09.03.99), full text, Figs. 1-12 
Document 4: JP, 1 1-232264, A (Canon Inc.), 27 August, 1999 (27.08.99), full text, Figs. 1-8 

The above documents describe the image distribution technique of adding a user's security data as an 
electronic watermark to image data (by the client side according to documents 1 and 2) in order to 
prevent illegal use of the image data by its distribution from the server side to the client side via a 
network and so the subject matters of claim 1-3 do not appear to be novel. 

The technique of transmitting an electronic key to open image data as described in claims 5-9, the 
technique of adding the quality of resolution or size of an image in a client's request as described in 
claims 25-27 and 31-33, the technique of storing a communication status between the server side and the 
security side as described in claims 28 and 35, and the technique of providing the IP address of a security 
controller or the like as described in claims 29, 36 and 40 are considered to be commonly-known art 
ordinarily used in the technical field concerned, and the subject matters of claims 5, 9, 25-38 and 40 
could have been easily conceived of based on the inventions disclosed in the above documents 1-4. 

Claims 4, 24 and 39 

Documents 5: JP, 1 1-69134, A (Sony Corporation), 9 March, 1999 (09.03.99), full text, Figs. 1-13 
Documents 6: JP, 9-252397, A (Tateba System K.K.), 22 September, 1997 (22.09.97), full text, Figs. 1-3 

The above documents describe the technique of adjusting the brightness of selected pixels when 
information is added to image data, and so applying the said technique to the inventions of documents 1- 
4 could have been easily conceived of. 

Claims 17 and 41-49 

Document 7: JP, 1 1-203075, A (Canon, Inc.), 30 July, 1999 (30.07.99), full text, Figs. 1-5 

The above document defining the general state of the art in the technical field concerned, the 
technique of allowing access between a security control server and a client for authenticating the 
acquisition of image data is neither described nor suggested in any of documents 1-7. 
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[pages 1-15] 

Specifications 

Image data distribution method and system, image data and recording medium 
Technological field 

The present invention pertains to technology for network distribution of a digitized 
image; particularly, to an image data distribution method and a system therefore as well as image 
data to be utilized therein. 

Background of the technology 

In general, since digital image data distributed via a network, such as the Internet, can be 
easily duplicated without impairing the picture quality, such data should be protected against 
illegal use; for example, against redistribution and/or duplication by unauthorized individuals. 
Thus, Japanese Kokai Patent Application No. Hei 9[1997]-191394, for example, discloses a 
method referred to as an electronic watermark or digital watermarking, which has been 
developed in order to embed copyright and source information in the image data to be 
distributed. 

However, this type of electronic watermarking, which merely adds the copyright source, 
has the problem that even when illegal use occurs, the distribution route of the data, that is, 
when, to which clients, and under what conditions was the data distributed, could not be 
specified. Thus, for example, Japanese Kokai Patent Application No. 2000-50047 discloses a 
data distribution method in which information for designating the distribution destination is 
embedded in the image data. However, even with this data distribution method, because no 
information on which user is responsible is contained, the redistribution route of data is unlikely 
to be specified accurately. 

Thus, the purpose of the present invention is to present an image data distribution method 
and a system therefor with which actual use of distributed image data by users can be found 
accurately, the redistribution route of the data can be specified easily in the event of an illegal 
use, and illegal use of the image data can be prevented or effectively curtailed. 

Disclosure of the invention 

The present invention concerns an image data distribution method characterized in that it 
contains a step in which image data distributed from the server side is unarchived to a memory 
on the client side, and user security data is then added to the unarchived image data in order to 
prevent illegal use of image data resulting from the distribution of image data from the server 
side to the client side via a network. 
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Accordingly, security data, that is, user or client identification data for the prevention of 
illegal use, can be added to the image data by the client who received the distributed image data, 
so that if the image data is used illegally, its redistribution route can be easily traced. Thus, an 
effective psychological restraint against the illegal use of image data can be achieved. 

In a particular application example, a process in which the user security data is 
transmitted from the client side to the server side and a step in which said security data is stored 
in a storage device on the server side are included wherein security data added to given image 
data and the security data stored on the server side can be cross-referenced in the event of illegal 
use of the image, so that the redistribution route of the image data can be more accurately traced. 

Preferably, the security data may be added to image data in the form of an electronic 
watermark. 

More preferably, the security data can be added to the image data by selecting several 
pixels at non-adjacent positions locations among the pixels for the aforementioned image data 
unarchived to a memory and by increasing or decreasing the luminance level of the 
aforementioned pixels selected. 

In addition, the present invention concerns an image data distribution method 
characterized in that it includes a step in which an instruction is given so that the aforementioned 
client can gain access to a security controller which performs authorization for image data 
distribution in response to a request made by the client, and a step in which an electronic key for 
unarchiving the image data is transmitted from the aforementioned security controller to the 
aforementioned client side in response to the authorization request for image data distribution 
from the aforementioned client side on the aforementioned server side in order to prevent illegal 
use of image data resulting from the distribution of image data from the server side to client side 
via a network. 

When distribution destinations are verified in advance in this manner, the image data can 
be prevented from being distributed to unauthorized users or clients. 

In a particular application example, a step for storing the communication status on the 
client side is provided. Accordingly, said distribution destination can be easily identified on the 
server side after the distribution of image data, so that in the event of illegal use, its redistribution 
route can be easily traced. 

In another application example, it is desirable that a security controller be provided 
separately from the server used for image data distribution, and the client side is instructed to 
gain access to the security controller using a IP address given to it. 

In another application example of the present invention, a storage medium containing 
software for the execution of said image data distribution method is presented on the client side 
or the server side. 
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In yet another application example of the present invention, the image data distribution 
method is characterized as a method for distributing image data from a server to clients and 
comprises a step in which an instruction for the aforementioned client side to gain access to a 
security controller is given from the server side in response to a request for image data by the 
client, a step in which the aforementioned client gains access to the aforementioned security 
controller in order to be authorized for image data distribution, a step in which image data 
corresponding to the aforementioned request is transmitted from the aforementioned server side 
to the aforementioned client side, a step in which an image key for opening the aforementioned 
image data is transmitted from the aforementioned server side to the aforementioned client side, 
a step in which the aforementioned image data is unarchived using the aforementioned image 
key on the aforementioned client side, and user security data is added to said image data, and a 
step in which the image data to which the aforementioned security data has been added is output. 

When so configured, because distribution destinations can be verified in advance in order 
to prevent image data from being distributed to unauthorized users or clients, and a client who 
actually received the image data can add security data, that is, user or client identification data 
for the prevention of illegal use, to the image data, the redistribution route in the event of illegal 
use of the image data can be easily traced. Therefore, not only can the illegal use of image data } 
be effectively prevented, but also there results a strong psychological restraint against the illegal 
use of image data. 

In a particular application example, because a step in which the aforementioned security 
data is transmitted to the server side and a step in which said security data is stored by the server 
are further provided, in the case of illegal use of image data, the security data that has been added 
to the image data and the security data stored by the server can be cross-referenced in order to 
trace and specify the redistribution route of the image data more accurately. 

In another application example, because the server is further provided with a step in 
which communication status with the client is stored in a log file, a client or user culpable of 
illegal use can be specified more accurately and easily. 

In addition, in a particular application example, it is desirable that a security controller be 
provided separately from the server used for image data distribution, and access to the security 
controller is instructed by giving an IP address to the client side. 

In another application example, image data transmitted from the server side is 
compressed, so that the security data can be added after said image data is unarchived on the 
client side. 

In addition, it is desirable that the security data be added to the image data in the form of 
an electronic watermark. 
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• In a specific application example, the security data can be added to the image data by 
selecting several pixels at non-adjacent positions locations among the pixels for the image data 
unarchived using the aforementioned image key and by increasing or decreasing the luminance 
level of the aforementioned selected pixels. 

The date and time of the distribution of the image data, user ID, and the serial number of 
the client storage device storing the image data or the IP address of the client may be included in 
the security data. When they are utilized, the redistribution route after the distribution of the 
image data can be easily traced. 

The present invention also provides an image data distribution system that is 
characterized in that it is equipped with an image file server having an image file database 
containing image files, a security control server having a user database containing registration 
data on respective users and an image key database containing image keys for unarchiving 
respective image files to clients, and a network for connecting the image file server, the security 
control server, and the clients; wherein, 

the image file server has a function of instructing a client to gain access to the security 
control server in response to a request from said client for image data and a function of 
transmitting the image data requested to the client, 

the client has a function of gaining access to the security control server to request for user 
authorization in order to obtain the image data, 

the security control server has functions of verifying via the user database, the user in 
response to the client's request for authorization and of then transmitting the image key to the 
requested image data from the image key database, and 

the client is further provided with functions for unarchiving the image data received using 
the image key and for adding user security data to said image data : 

When so configured, distribution destinations can be authorized in advance in order to 
prevent image data from being distributed to unauthorized users or clients, and the redistribution 
route of image data can be specified easily, since security data, that is, user or client 
identification data, is added to the image data by the client who received the image data, so that 
an image data distribution method with which illegal use of image data can be prevented and 
psychologically discouraged more reliably than ever can be realized. 

In a particular application example, because the client has also the function of 
transmitting the security data to the security control server, and the security control server also 
has the function of storing the security data, the security data in the image data and the one 
stored in the security control server can be cross-referenced at a later time. 
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In another application example, because the security control server has a log file to store 
the communication status with a client, the image data distribution status can be ascertained 
more accurately. 

It is desirable that the image file server give the instruction for gaining access to the 
security control server through the provision of the IP address. 

In a particular application example, image data transmitted from the image file server is 
compressed, so that the client unarchives the image data received before adding the security data. 

It is desirable that the client add the security data to the image data in the form of an 
electronic watermark. 

In addition, it is convenient if the security data contain the date and time of the 
distribution of the image data, user ED, and the serial number of the client's storage device 
storing the image data or the IP address of the client when specifying the redistribution route of 
the image data. 

Furthermore, the present invention also provides image data with embedded user 
information by increasing or decreasing the luminance levels of several selected pixels placed at 
discrete locations on a map of pixel data represented by dots. 

/ 

Brief description of the figures 

Figure 1 is a diagram showing the outlined configuration of a preferred application 
example of the image data distribution system in accordance with the present invention. 

Figure 2 is a flowchart showing the process of image data distribution in the image data 
distribution system in Figure 1 . 

Preferred embodiment of the invention 

Figure 1 shows the outline of a system configuration on the Internet as a preferred 
application example of the image distribution system in accordance with the present invention. 
The image distribution system in the present application example is configured with multiple 
clients (2) correctable via a network environment, such as the Internet (1), an image filer server 
(3), and a security control server (4). The client (2) is a computer provided with functions for 
transmitting a request specifying a desired image to the image file server (3) using WWW 
browser on the Internet (1) in order to receive digital image data from said server and for 
regenerating the image. 

The image file server (3) is made of a computer for transmitting image data in response to 
the request from the client (2) on the Internet and provided with a file database (5) containing 
image files and a log file (6) for storing communication status with the client (2). Furthermore, 
the image file server (3) has the function of transmitting an IP address for the security control 
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server (4) in response to the request for image data from the client (2) in order to instruct the 
client (2) to gain access to the security control server and the function of transmitting the 
requested image data from the image file database (5) to the client. 

In the present application example, compressed hierarchized image files having a data 
structure in which digitized image data is hierarchized once according to the significance of the 
information (for example, luminance level or changes in luminance level) the respective pixels 
have and then restructured are stored in the image file database (5). These hierarchized image 
files can be generated using, for example, the image compression method described in the 
specifications of International Patent Application No. PCT/JP00/04472 by the inventor of the 
present application. Said hierarchized image files comprise information on the positions and the 
luminance levels of respective pixels. Because the images differ in terms of quality, that is, 
resolution, depending on their ranking and size, the client can specify the image quality when 
requesting image data. 

The security control server (4) has a user database (7) containing the contents of the 
registrations of users who are allowed to utilize the image files in the image file database (5), an 
image key database (8) containing the necessary image keys for unarchiving the aforementioned 
image files, and a log file (9) for storing communication statuses with clients (2). Respective 
users and their identification data are classified into several groups and registered in the user 
database (7) of the present application example. Each group is granted certain rights, so that they 
select the corresponding quality, that is, resolution, and size. 

The client (2) can gain access to the security control server using the IP address for the 
security control server (4) received from the image file server (3) in order to request for 
authorization to acquire the image data. The security control server (4) verifies the user through 
database (7) in response to said authorization request and transmits an image key peculiar to the 
image data requested from the image key database (8). 

The client (2) is also able to unarchive the image data received from the image file server 
(3) into the memory using the aforementioned image key and to add user security data to said 
image data. Said security data contains identification data on the client or user, such as the date 
and time of the distribution of the image data, user ID, serial number of the storage device, for 
example, a hard disk drive, to which the image data was downloaded, IP address of the client (2), 
which are useful for tracing the redistribution route in the event of illegal use. 

Next, a preferred application example of the image distribution method in accordance 
with the present invention will be explained using Figure 2. First, the client (2) activates a 
general-purpose or WWW-dedicated browser in order to get connected to the image file server 
(3) via the Internet. Once the client (2) transmits a request specifying the name and the quality of 
the desired image file (step SI), the image file server (3) returns an IP address for the security 
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control server (4) (step S2). The client (2) gains access to the security control server (4) using 
said IP address in order to request for authorization to acquire the image data (step S3). User ID, 
client's IP address, and serial number of the hard disk drive as data peculiar to the client are 
utilized for said authorization. 

The security control server (4) verifies registered data, such as user ID, in reference to the 
user database (7) before granting authorization (step S4). Then, an image key peculiar to the 
image data requested is obtained from the image key database (8) and transmitted to the client 

(2) (step S5), and the status of this communication is stored in the log file at the same time (9) 
(step S6). On the other hand, the image filer server (3) obtains the image data requested from the 
image file database (5) and transmits it to the client (2) (step S7). Similarly, the image file server 

(3) also stores the communication status with the client (2) in the log file (6). 

The client (2) opens and decompresses the image data received from the image file server 
(3) using the image key received from the security control server (4) and unarchives it to 
memory as a pixel data map of the respective pixels constituting the image (step S8). Then, the 
security data is encoded and added to the unarchived image data (step S9). In general, the 
addition of security data is achieved using a so-called electronic watermark. In the present 
application example, an electronic watermark can be inserted by selecting several pixels placed; 
at non-adjacent positions locations among the pixels for the aforementioned unarchived image 
data and increasing or decreasing the luminance levels of the aforementioned pixels. The 
positions of the aforementioned pixels can be selected in advance, and they can be also changed 
depending on the contents of the image. 

The image data to which the security data has been added in said manner is output (step 
S10) and can be utilized in a variety of ways; for example, displayed directly on the client's 
display, stored in a storage device, such as a hard disk drive, or other storage media; or 
transmitted on-line to another apparatus. At the same time, the client (2) transmits the 
aforementioned security data to the security control server (4) (step SI 1), and the security control 
server (4) stores it in the log file (9) (step S12). 

As a result, because a record on the distribution of the image data is kept in the security 
control server (4), in the event of subsequent illegal use of the image data, its redistribution route 
can be easily specified by cross-referencing the security data embedded in the image data. In 
addition, in the present application example, because the image file server (3) and the security 
control server (4) are provided separately, security data transmitted from clients can be managed 
once the address of the security control server (4) is preset on the network even when the image 
file server (3) is set to an arbitrary address as needed, that is, when the image file database (5) is 
set to an arbitrary address. 
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In another application example of the present invention, the image file server (3) and the 
security control server (4) can be integrated in order to use a single server for the configuration. 
In this case, access to the security control server (4) and use of the image key can be omitted. 
That is, the client (2) first requests authorization from the server for image distribution; and after 
the server has granted authorization in reference to the user database (7) in response to said 
request, the client (2) requests distribution of the desired image in order to have the image 
transmitted. Needless to say, in this case, too, after the client has opened the image data and 
unarchived it into the memory, security data is added to the image data in the same manner as 
that in the aforementioned application example and transmitted to the server, and the server 
stores it into the log file. 

Moreover, in yet another application example, the IP address for the security control 
server (4) can be added to the image data distributed from the image file server (3) in advance. In 
this case, upon receiving an image data distribution request from the client (2), the image file 
server (3) transmits the image data requested. The client (2) reads the BP address from the image 
data received and gains access to the security control server (4) in order to request authorization. 
Once the security control server (4) completes authorization and transmits the image key, the 
client (2) is able to open the image data using said image key. 

A preferred application example of the present invention was explained in detail above. 
As is clear to an expert in the field, the present invention can be implemented with various kinds 
of changes and modifications to the aforementioned application example without exceeding the 
scope of the invention. For example, the present invention can also be applied to a network other 
than the Internet in the same manner. 

Claims 

1. An image data distribution method characterized in that it contains a step in which 
image data distributed from the server side is unarchived into a memory on the client side, and 
user security data is then added to the unarchived image data in order to prevent illegal use of 
image data resulting from the distribution of image data from the server side to the client side via 
a network. 

2. The image data distribution method of Claim 1, characterized as further containing a 
process in which the aforementioned user security data is transmitted from the aforementioned 
client side to the aforementioned server side and a step in which the aforementioned security data 
is stored in a storage device on the aforementioned server side. 

3. The image data distribution method of Claim 1 or 2, characterized in that the 
aforementioned security data is added to the aforementioned image data in the form of an 
electronic watermark. 
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4. The image data distribution method of one of Claims 1 through 3, characterized in that 
the aforementioned security data is added to the aforementioned image data by selecting several 
pixels in non-adjacent positions locations from the pixels of the aforementioned unarchived 
image data and by increasing or decreasing the luminance level of the aforementioned selected 
pixels. 

5. An image data distribution method characterized in that it includes a step on the server 
side in which an instruction is given for the aforementioned client side to gain access to a 
security controller which authorizes distribution of image data in response to a request made by 
the client, and a step on the server side in which an electronic key for unarchiving the image data 
is transmitted from the aforementioned security controller to the aforementioned client side in 
response to the authorization request for image data distribution from the aforementioned client 
side in order to prevent illegal use of image data resulting from the distribution of image data 
from the server side to the client side via a network. 

6. The image data distribution method of Claim 5, characterized as further containing a 
step for storing the client communication status. 

7. The image data distribution method of Claims 5 or 6, characterized in that access to the 
aforementioned security controller is instructed through the provision of IP address for the / 
aforementioned security controller. 

8. A storage medium containing software for the execution of the image data distribution 
method of one of Claims 1 through 3 and 5 through 7. 

9. An image data distribution method characterized in that it is a method for distributing 
image data from a server to a client comprising 

a step in which an instruction for the aforementioned client side to gain access to a 
security controller is given from the server side in response to a request for an image data by the 
client side, 

a step in which the aforementioned client side gains access to the aforementioned security 
controller in order to be authorized to receive image data, 

a step in which image data corresponding to the aforementioned request is transmitted 
from the aforementioned server side to the aforementioned client side, 

a step in which an image key for opening the aforementioned image date is transmitted 
from the aforementioned server side to the aforementioned client side, 

a step in which the aforementioned image data is unarchived using the aforementioned 
image key on the aforementioned client side, and user security data is added to said image data, 
and a step in which the image data added with the aforementioned security data is output. 



10. The image data distribution method of Claim 9, characterized in that it also contains a 
step in which the aforementioned security data is transmitted to the aforementioned server side 
and a step in which said security data is stored by the aforementioned server side. 

11. The image data distribution method of Claim 9 or 10, characterized in that the 
aforementioned server side is further provided with a step in which communication status with 
the client side is stored in a log file. 

12. The image data distribution method of one of Claims 9 through 1 1, characterized in 
that access to the aforementioned security controller is instructed through the provision of IP 
address for the aforementioned security controller. 

13. The image data distribution method of one of Claims 9 through 12, characterized in 
that the aforementioned image data transmitted from the server side is compressed, so that the 
aforementioned security data is added after said image data is unarchived upon the request from 
the aforementioned client. 

14. The image data distribution method of one of Claims 9 through 13, characterized in 
that the aforementioned security data is added to the aforementioned image data in the form of an 
electronic watermark. 

15. The image data distribution method of one of Claims 9 through 14, characterized in/ 
that the aforementioned security data is added to the aforementioned image data by selecting 
several pixels placed at non-adjacent positions locations among the pixels for the aforementioned 
image data unarchived using the aforementioned image key and by increasing or decreasing the 
luminance level of the aforementioned pixels selected. 

16. The image data distribution method of one of Claims 9 through 1 5 characterized in 
that the date and time of the distribution of the aforementioned image data, user ID, and the 
serial number of the aforementioned client's storage device storing the aforementioned image 
data or the IP address of the aforementioned client are included in the aforementioned security 
data. 

17. An image data distribution system characterized in that it is equipped with an image 
file server having an image file database containing image files, 

a security control server having a user database containing registration data on the 
respective users and an image key database containing image keys for unarchiving the 
aforementioned respective image files, 

clients, and 

a network for connecting the aforementioned image file server, the aforementioned 
security control server, and the aforementioned clients; wherein, 

the aforementioned image file server has the function of instructing the client to gain 
access to the aforementioned security control server in response to a request from the 
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aforementioned client for image data and a function of transmitting the image data requested to 
the aforementioned client, 

the aforementioned client has a function of gaining access to the aforementioned security 
control server to request user authorization to obtain the aforementioned image data, 

the aforementioned security control server has functions of verifying, via the 
aforementioned user database, the user authorization in response to the aforementioned client's 
request for authorization and of then transmitting the image key to the aforementioned requested 
image data from the requested image key database, and 

the aforementioned client is further provided with functions for unarchiving the 
aforementioned image data received using the aforementioned image key and for adding the 
aforementioned user security data to the aforementioned image data. 

18. The image data distribution system of Claim 17 characterized in that the 
aforementioned client has also a function of transmitting the aforementioned security data to the 
aforementioned security control server, and that the aforementioned security control server also 
has a function of storing the aforementioned security data. 

19. The image data distribution system of Claim 17 or 18, characterized in that the 
aforementioned security control server has a log file to store communication statuses with the / 
aforementioned clients. 

20. The image data distribution system of one of Claims 17 through 19, characterized in 
that the aforementioned image file server gives an instruction to gain access to the 
aforementioned security control server through the provision of the IP address. 

21. The image data distribution system of one of Claims 17 through 20, characterized in 
that the aforementioned image data transmitted from the aforementioned image file server is 
compressed, so that the aforementioned client unarchives the aforementioned received image 
data before adding the aforementioned security data. 

22. The image data distribution system of one of Claims 17 through 21, characterized in 
that the aforementioned client has the function of adding the aforementioned security data to the 
aforementioned image data in the form of an electronic watermark. 

23. The image data distribution system of one of Claims 17 through 22, characterized in 
that the aforementioned security data contains the date and time of the distribution of the 
aforementioned image data, user ID, and the serial number of the aforementioned client's storage 
device storing the aforementioned image data or the IP address of the aforementioned client. 

24. Image data characterized in that user information is embedded by increasing or 
decreasing the luminance levels of several selected pixels at non-adjacent positions within a map 
made up of pixel data in the form of dots. 
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Abstract 

An image distribution system is configured with multiple clients 2 connectable via a 
network environment, such as Internet 1; image file server 3 having image file database 5 
containing image files and log file 6; user database 7; and security control server 4 having image 
key database 8 and log file 9. Image data from the image file server can be opened once the 
client who made the image data request gains access to the security control server using an IP 
address obtained from the image file server, is granted authorization, and obtains an image key. 
The client encodes security data, such as the date and time of the distribution of the image data, 
user ID, serial number of hard disk drive, and client's IP address, in order to embed it in the 
image data unarchived into its memory in the form of an electronic watermark and transmits the 
security data to the security control server in order to store it in the log file at the same time. 




CLAIMS 

1 . An image data distribution method comprising: 

storing image data distributed from the server side into a memory on the client 
system side; and 

adding user security data to the stored image data in order to prevent illegal 
use of image data resulting from the distribution of image data from the server side to the 
client system side via a network. 

2. The image data distribution method of Claim 1, further comprising: 
transmitting user security data from the client system side to the server side; 

and 

storing the security data in a storage device on the server side. 

3. The image data distribution method of Claim 1, wherein the security 
data is added to the image data in the form of an electronic watermark. 

4. The image data distribution method of Claim 1, wherein the security 
data is added to the image as an electronic window. 

5. The image data distribution method of Claim 1, wherein security data 
is added to the image data by selecting several pixels in non-adjacent positions locations from 
the pixels of the unarchived image data and by increasing or decreasing the luminance level 
of the selected pixels. 

6. An image data distribution method comprising: 

giving an instruction for the client system side to gain access to a security 
controller which authorizes distribution of image data in response to a request made by the 
client system; and 

transmitting an electronic key for unarchiving the image data from the security 
controller to the client system side in response to the authorization request for image data 
distribution from the client system side in order to prevent illegal use of image data resulting 
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from the distribution of image data from the server side to the client system side via a 
network. 

7. The image data distribution method of Claim 5, wherein image data 
have image files of varying image quality; and the request from the above-mentioned client 
includes a designation of image quality. 

8. The image data distribution method of Claim 7, wherein the said image 
data have image files with a data structure which is made hierarchical by the image quality. 

9. The image data distribution method data of Claim 7, wherein said 
image quality is the resolution or size of the images. 

10. The image data distribution method of Claim 6, further comprising 
storing the client system communication status. 

1 1 . The image data distribution method of Claim 6, wherein access to the 
security controller is instructed through the provision of IP address for the security controller. 

12. A storage medium containing software that enables a program to 
execute, the storage medium comprising: 

code for storing image data distributed from the server side into a memory on 
the client system side; and 

code for adding user security data to the stored image data in order to prevent 
illegal use of image data resulting from the distribution of image data from the server side to 
the client system side via a network. 

13. An image data distribution method for distributing image data from a 
server to a client system comprising: 

giving an instruction from the server side for the client system side to gain 
access to a security controller in response to a request for an image data by the client system 
side; 
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providing the client system side access to the security controller in order to be 
authorized to receive image data; 

transmitting image data corresponding to the request from the server side to 
the client system side; 

transmitting an image key for opening the image date from the server side to 
the client system side; 

unarchiving image data using the image key on the client system side; 

adding user security data to said image data; and 

outputting the image data having the added security data. 

14. The image data distribution method of Claim 13 further comprising: 
transmitting the security data to the server side; and 

storing said security data at the server side. 

15. The image data distribution method of Claim 13 further comprising 
storing the communication status with the client system side in a log file. 

16. The image data distribution method of Claim 13, wherein access to the 
security controller is instructed through the provision of IP address for the security controller. 

17. The image data distribution method of Claim 13, wherein the image 
data transmitted from the server side is compressed, so that the security data is added after 
said image data is unarchived upon the request from the client system. 

18. The image data distribution method of Claim 13, wherein the security 
data is added to the image data in the form of an electronic watermark. 

19. The image data distribution method of Claim 13, wherein the security 
data is added to the image data by selecting several pixels placed at discontinuous positions 
locations among the pixels for the image data unarchived using the image key and by 
increasing or decreasing the luminance level of the pixels selected. 
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20. The image data distribution method of Claim 13, wherein the date and 
time of the distribution of the image data, user ED, and the serial number of the client system's 
storage device storing the image data or the IP address of the client system are included in the 
security data. 

21. The image data distribution method of Claim 13, further comprising: 
transmitting image data having image files of varying image quality; and 
requesting from said client a designation of image quality. 

22. The image data distribution method of Claim 21, wherein said image 
data have image files with a data structure which is made hierarchical by the image quality. 

23. The image data distribution method of Claim 21, wherein said image 
quality is the resolution or size of the images. 

24. An image data distribution system comprising: 

an image file server having an image file database containing image files; 

a security control server having a user database containing registration data on 
the respective users and an image key database containing image keys for unarchiving the 
respective image files; 

a network for connecting the image file server, the security control server, and 
to client systems; wherein, 

the image file server has the function of instructing the client system to 
gain access to the security control server in response to a request from the client system for 
image data and a function of transmitting the image data requested to the client system; 

the client system has a function of gaining access to the security 
control server to request user authorization to obtain the image data; 

the security control server has functions of verifying, via the user 
database, the user authorization in response to the client system's request for authorization 
and of then transmitting the image key to the requested image data from the requested image 
key database; and 
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the client system is further provided with functions for unarchiving the 
image data received using the image key and for adding the user security data to the image 
data. 

25. The image data distribution system of Claim -24, wherein said image 
data have image files of varying image quality; and the request from the above-mentioned 
client includes a designation of image quality. 

26. The image data distribution system of Claim 25, wherein the image 
data have image files with a data structure which is made hierarchical by the image quality. 

27. The image data distribution system of Claim 25, wherein said image 
quality is the resolution or size of the images. 

28. The image data distribution system of Claim 24, wherein the client 
system has also a function of transmitting the security data to the security control server, and 
that the security control server also has a function of storing the security data. 

29. The image data distribution system of Claim 24, wherein the security 
control server has a log file to store communication statuses with the client systems. 

30. The image data distribution system of Claim 24 wherein the image file 
server gives an instruction to gain access to the security control server through the provision 
of the IP address. 

31. The image data distribution system of Claim 24 wherein the image 
data transmitted from the image file server is compressed, so that the client system 
unarchives the received image data before adding the security data. 

32. The image data distribution system of Claim 24 wherein the security 
data contains the date and time of the distribution of the image data, user ID, and the serial 
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number of the client system's storage device storing the image data or the IP address of the 
client system. 

33. Image data having user information embedded therein by increasing or 
decreasing the luminance levels of several selected pixels positions which are not continuous 
within a map made up of pixel data in the form of dots. 
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